JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 58.20.243.17

58.20.243.17 was found in our database!

This IP was reported 226 times. Confidence of Abuse is 81%: ?

81%

ISP	CNC Group HuNan YiYang network
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Changsha, Hunan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 58.20.243.17

Whois 58.20.243.17

IP Abuse Reports for 58.20.243.17:

This IP address has been reported a total of 226 times from 106 distinct sources. 58.20.243.17 was first reported on August 9th 2025, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-07-17 09:18:02 (12 hours ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=3)	Hacking Brute-Force SSH
Anonymous	2026-07-17 03:48:33 (18 hours ago)	Blocked by firewall on hugin [1433/tcp] \| Rule: UFW \| SPT: 12096 \| TTL: 108 \| LEN: 52 \| TOS: 0x00 • ... show more Blocked by firewall on hugin [1433/tcp] \| Rule: UFW \| SPT: 12096 \| TTL: 108 \| LEN: 52 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 centurion	2026-07-17 03:47:58 (18 hours ago)	Blocked by UFW on cloud [1433/tcp] Source port: 26212 TTL: 111 Packet length: 52 TOS: 0x00 This rep ... show more Blocked by UFW on cloud [1433/tcp] Source port: 26212 TTL: 111 Packet length: 52 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇵🇱 sefinek.net	2026-07-16 17:45:43 (1 day ago)	Honeypot hit: MSSQL traffic (on 1433) without login credentials Reported by: https://github.com/sefi ... show more Honeypot hit: MSSQL traffic (on 1433) without login credentials Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇮🇳 evicky2002	2026-07-16 06:03:50 (1 day ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=3)	Hacking Brute-Force SSH
🇫🇷 thecocasio	2026-07-16 04:40:11 (1 day ago)	PortSentry honeypot: unsolicited TCP connection to closed decoy port 1433 (MSSQL) on a host running ... show more PortSentry honeypot: unsolicited TCP connection to closed decoy port 1433 (MSSQL) on a host running no such service. Automated port-scan detection at 2026-07-16T04:40:11Z. show less	Port Scan
🇱🇹 NotACaptcha	2026-07-15 01:25:35 (2 days ago)	Unauthorised access (Jul 15 04:25) SRC=58.20.243.17 LEN=52 TTL=100 ID=1026 DF TCP DPT=1433 WINDOW=81 ... show more Unauthorised access (Jul 15 04:25) SRC=58.20.243.17 LEN=52 TTL=100 ID=1026 DF TCP DPT=1433 WINDOW=8192 SYN show less	Port Scan
🇦🇷 Bruno	2026-07-13 21:58:30 (4 days ago)	Port Scanner: 58.20.243.17	Port Scan
🇫🇷 Entalpi.net	2026-07-07 20:18:22 (1 week ago)	Tried to hit sensible closed port commonly used in attacks	Port Scan Hacking
🇫🇮 6kilowatti	2026-07-02 13:21:48 (2 weeks ago)	2026-07-02T16:21:47.753719+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ... show more 2026-07-02T16:21:47.753719+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=58.20.243.17 DST=83.148.240.21 LEN=52 TOS=0x00 PREC=0x00 TTL=103 ID=26292 DF PROTO=TCP SPT=51975 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 phil2k	2026-07-01 20:46:27 (2 weeks ago)	portscan on multiple TCP ports : Firewall: Within 2026-06-30 17:39:53 - 2026-06-30 17:39:54 CEST(+02 ... show more portscan on multiple TCP ports : Firewall: Within 2026-06-30 17:39:53 - 2026-06-30 17:39:54 CEST(+0200) identified: unallowed access from 58.20.243.17/32 on port 1433(ms-sql-s) (1 trial) Fail2ban: Within 2026-06-30 17:39:53 - 2026-06-30 17:39:54 CEST(+0200) banned: 4 times by fail2ban[firewall]; 4 times by fail2ban[recidive] show less	Port Scan
🇫🇷 sthoyer.de	2026-07-01 12:39:51 (2 weeks ago)	Jul 1 14:39:51 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jul 1 14:39:51 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=58.20.243.17 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=6068 DF PROTO=TCP SPT=54231 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 phil2k	2026-06-30 15:39:57 (2 weeks ago)	fail2ban:firewall:2026-06-30T17:39:53.920860+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> ... show more fail2ban:firewall:2026-06-30T17:39:53.920860+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=58.20.243.17 DST=<PRIVATE_IPv4> LEN=52 TOS=0x00 PREC=0x00 TTL=107 ID=38184 DF PROTO=TCP SPT=23898 DPT=1433 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-30T17:39:54.686857+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=58.20.243.17 DST=<PRIVATE_IPv4> LEN=52 TOS=0x00 PREC=0x00 TTL=107 ID=38185 DF PROTO=TCP SPT=27594 DPT=1433 WINDOW=64240 RES=0x00 SYN URGP=0 show less	DDoS Attack Port Scan Brute-Force
🇺🇸 Cyber Crusader	2026-06-29 22:09:48 (2 weeks ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇫🇮 iamxorum	2026-06-27 18:06:03 (2 weeks ago)	2026-06-27T18:06:02.838071+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74 ... show more 2026-06-27T18:06:02.838071+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=58.20.243.17 DST=46.62.222.43 LEN=52 TOS=0x00 PREC=0x00 TTL=110 ID=25738 DF PROTO=TCP SPT=32302 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan

Showing 1 to 15 of 226 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.105

🇺🇸 216.25.89.83

🇲🇽 189.204.230.91

🇨🇳 123.54.215.74

🇰🇷 114.202.80.152

🇺🇸 107.170.212.206

🇫🇷 104.23.225.138

🇰🇿 92.47.166.23

🇯🇵 74.176.227.101

🇺🇸 74.115.172.118

🇱🇹 62.60.130.219

🇺🇸 54.69.180.141

🇺🇸 45.92.229.78

🇺🇸 45.92.229.76

🇷🇴 38.133.142.84

🇺🇸 20.115.88.161

🇺🇸 18.116.101.220

🇮🇳 13.71.92.229

🇺🇸 3.238.120.209

🇺🇸 3.236.237.58